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REMARKS 

Applicant appreciates the Examiner's thorough review of the application. Reconsideration 

and allowance of all claims are requested. 

Curtently examined claims include claims 15 - 17, 20 and 23 - 36. Formerly withdrawn 
claims 1 - 14, 18 - 19 and 21-22 have been canceled without prejudice. Applicants reserve the right 
to pursue the cancelled claims in divisional patent applications. 

Claim Amendments 

i^licant has amended the claims to more clearly indicate the subjea matter claimed. No 
new matter has been added by the amendments. In particular, the claims independent claims have 
been amended to more cleaily describe the multi-dimensional content profiling. 

Support for the amendments to the claims and definitions of terms maybe found generally 
at pages 51 - 61 of the specification. No new matter has been added by the amendments. More 
specifically, support for the amendments to the independent claims maybe found at, for example, 
P. 49, 11. 7 - 11; P. 52, IL 4 - 6; P. 53, 11. 12 - 13; P. 54, 11. 15 - 16; and P. 53, IL 13 - 15. 

Applicant has added new claims 24 - 36, which depend from independent claims 15, 20 and 
23. No new matter has been added by the amendments. Support for the new claims maybe found 
generally at p^es 51 - 61 of the specification. More specifically, support maybe found at: P. 41, 11. 
7 - 1 1 for claim 24; P. 54, 1. 17 - P. 55, L 17 for claim 25; P. 54, L 17 - P. 55, 1. 17 for claim 26; P. 57, 
1. 9 - P. 58, 1. 6 for claim 27; P. 53, 11. 19 - 21 for claim 28; P. 53, U. 19 - 21 for claim 29; P. 53, U. 16 - 
18 for claim 30; P. 54, L 17 - P. 55, L 17 for claim 31; P. 54, 1. 17 - P. 55, L 17 for claim 32; P. 41, 11. 7 
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- 11 for claim 33; P. 59, IL 11 - 12 for claim 34; P. 60, L 9 - P. 61, L 7 for claim 35; and P. 56, IL 1 - 4 
for claim 36. 

No new matter has been added by the amendments. Reconsideration and allowance of all 
claims are requested. 

Claims 15 - 17. 20 and 23 - 36 are patentable under 35 U.S.C 102(e) over Doyle et al. (U.S. 
Patent PubUcation No. 2005/003934). 

Qaims 15-17, 20 and 23 - 36 are patentable over Doyle under 35 U.S.C 102(e). 

Reconsideration and allowance are requested. 

Independent claim 15 requires a method comprising: receiving network data; processing the 
network data at a decoder chain to create input data for applying at least multi-dimensional content 
profilii^, preventii^, through the network data, leaks of information by at least applyir^ the multi- 
dimensional content profiling; and wherein the multi-dimensional content profiling comprises: 
loading one or more profiles, wherein the one or more profiles each comprise an expected set of 
statistical characteristics of data; continuously receiving the input data from the decoder chain; 
determining a probabilistic measure of membership of the input data relative to the one or more 
profiles; comparir^ the probabilistic measure with a threshold requirement for each of the one or 
more profiles; and generating a reactive measure if the probabilistic measure meets the threshold 
requirement. 

Independent claim 20 requires a machine- readable medium having encoded information, 
viiach y^n read and executed by a machine causes a method comprisir^: receiving network dat^ 
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processmg die network data at a decoder chain to create input data for applying at least multi- 
dimensional content profilmg; preventing, through the network data, leaks of information by at least 
applyLt^ multi-dimensional content profilit^; and wherein the multi-dimensional content profiling 
comprises: loading one or more profiles, wherein the one or more profiles each comprise an 
expected set of sutistical characteristics of dat£^ continuously receivii^ the input data from the 
decoder chain; determining a probabilistic measure of membership of the input data relative to the 
one or more profiles; comparii^ the probabilistic measure with a threshold requirement for each of 
the one or more profiles; and generating a reactive measure if the probabilistic measure meets the 
threshoki requirement. 

Independent claim 23 requires an apparatus comprisir^: a receiver to receive network data; a 
processor, coupled to the receiver, to prevent, through the network data, leaks of information by at 
least applying multi-dimensional content profilii^, \diereiQ the processor processes the network 
data at a decoder chain to create input dau for applyii^ at least the multi-dimensional content 
profiling; the multi- dimensional content profiling comprising: loading one or more profiles, wherein 
the one or more profiles each comprise an expected set of statistical characteristics of data; 
continuously receivii^ the input data from the decoder chain; determining a probabilistic measure 
of membership of the input data relative to the one or more profiles; comparing the probabilistic 
measure with a threshold requirement for each of the one or more profiles; and generating a 
reactive measure if the probabilistic measure meets the threshold requirement. 

Doyle cannot anticipate the claims because Dojde does not contain all of the limiutions of 
independent claims 15, 20 and 23. 

Dojde discloses a method of secuiii^ or controlling document components of compound 

documents with security rules specific to particular document components. See Abstract. Dojie 
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secures document components with "security containers" that encapsulate the components and 
component metadata. See Abstract. Doyle further discloses that document controls can be 
exercisedatthelevelof individual portions of a larger document. See paragraph 0037. Generally, 
Doyle discloses a digital rights management ("DRM") application. A document component 
applying the DRM of Doyle cannot be read without recipient havii^ private key access. See, for 
example, FIG. 8. There is no suggestion that the private access keys comprise a set of statistical 
characteristics of data. Moreover, there is no determination that the probabilistic measure of 
membership of the input data in the set of statistical characteristics of data is found in Doyle. 
Furthermore, Doyle's invention does not require that the document is transferred over the network, 
but merely that a user attempt to access the encrypted content. 

In contrast. Applicant's invention is a device for listenii^ to network data to prevent 
unwanted leaks of information. As recited in the independent claims. Applicant's invention 
requires, along with additional elements, receiving network data and applying multi-dimensional 
content profiling. Features such as the multi-dimensional content profiling as disclosed in 
Applicant's invention are neither disclosed nor suggested by Dojde. i^plicant's invention performs 
these actions regardless of whether the network data is encrypted, has embedded DRM tags, or has 
the partial DRM "security containers" as found in Doyle. Furthermore, Applicant's invention does 
not require any special preparation of the network data being transferred over the network to be 
operational 

^plicant's invention is able to prevent leaks of information, includii^ such information as 
would be in documents incorporating the encryption of the Do}4e invention, by applying multi- 
dimensional content profilii^ on received network data. As clearly set forrfi in the disclosure multi- 
dimensional content profilii^ is a combination of techniques targeted at identification of documents 
beloi^jng to a certain document class. Specification at p^e 51, line 5 - p^e 61, line 10. The claims 
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have been amended to more cleaily specify the operation of multi-dimensional content profilii^. 
Generally, mdti-dimensional content profiling is a coUection of statistical routines that profile data 
by implementing a set of iacreasii^y precise statistical estimators and implementing run-time 
verification of extracted entities. Specification at page 51, line 5 - page 61, line 10. Multi- 
dimensional content profiling or similar procedures are not found in Doyle. 

Do)ie does not teach the invention as claimed in the independent claims. For example, the 
Office Action cites to paragraphs 0014, 0021, 0038, 0040 - 0041, 0044 - 0047, 0050 - 0051, 0057 - 
0060 and 0081 - 0087 as teachii^ "preventing, through the network data, leaks of information by at 
least applying multi-dimensional content profiling". See page 3 of the April 27, 2007 Office Action. 
These pan^raphs, however, do not appear to teach applying the multi-dimensional content profilir^ 
required by the claims. For example, paragraph 0014 discloses control, by document creators, of 
access to individual components of a document, but does not disclose applying multi-dimensional 
content profilir^. Par^raph 0021 discloses control of access to document components by 
conditional logic, but does not disclose applying multi- dimensional content profiling. Paragraph 
0038 discloses a "security container" encapsulatir^ portions of a document for controlling access to 
that component, but does not disclose applyir^ multi-dimensional content profiling. Paraphs 
0040 - 0041 disclose metadata associated with document components for controllir^ access to the 
components and for containing functional controls for the components, but do not disclose 
applying multi-dimensional content profiling. Paragraph 0044 discloses preventing accidental 
dissemination of information by preventii^ receiving parties from accessing the components unless 
authorized, but does not disclose applying multi-dimensional content profiling. Par^raphs 0045 - 
0047 disclose encryption headers, encrypted symmetric keys or public key infrastructure 
public/ private key pairs for determinir^ whether a receiving party is authorized to view document 
components, but do not discbse applying multi-dimensional content profiling. Pan^phs 0050 - 
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0051 disclose encrypted document conaponents with controls on access, but do not disclose 
applying multi-diniensional content profiling. Paragraphs 0057 - 0060 disclose object-oriented 
security container operations, including "filter rules" for determining whether a document 
component may be accessed by a user. In particular, the filter rules in paragraphs 0059 - 0060 
disclose a series of rules for checking authori2ation to act upon a security container object or 
document component object, but do not disclose applying multi-dimensional content profiling as 
required in the claims. Pan^raphs 0081 - 0087 disclose receivir^ access requests and verifying a 
user's privilege r^hts regarding access throi^ a series of requests mediated by the encryption 
header, but do not disclose applying multi-dimensional content profiling. Dojde simply makes the 
reading of the content more difficult, but in no way stops the transfer of the encrypted data. 

Therefore, Do)de at least does not disclose preventing, through the network data, leaks of 
information by at least applying multi-dimensional content profiling as required in the independent 
claims. Doyk does not disclose each and every element of the independent claims so a rejection 
under 35 U.S.C 102 is unsupportable. Consequendy, independent claims 15, 20 and 23 are 
patentable overDojde. 

Dependent claims 16 - 17 and 24 - 36 add further patentable features to the patentable 
features of the independent claims. Therefore, the dependent claims are patentable over Do3de. 

Because Doyle does not disclose each and every limitation found in claims 15 - 17, 20 and 
23 - 36 Doyle does not anticipate these claims. Accordingly, claims 15 - 17, 20 and 23 - 36 are 
patentable over Doyk. Applicants respectfully request that the Examiner withdraw the rejection. 
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CjONCLUSION 

In view of the foregoing amendments and remarks, Applicants respectfully request 
reconsideration and reexamination of this application and the timely allowance of the pending 
claims. 

Applicant believes no fee is due with this Substitute Amendment. However, if a fee is due, 
please chaige our Deposit Account No. 50-2228, under Oder No. 020501.0802PTUS from wiuch. 
the undersized is authorized to draw. 



Dated: July 29, 2008 Respectfuljysi 




Matthew J.lLaskoski 
Registration No.: 55,360 
PATTONBOGGSLLP 
8484 Westpark Drive, 9th Floor 
JVfcLean, Virginia 22102 
(703) 744 - 8000 
(703) 744 - 8001 (Fax) 
Attorney for i^plicant 
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